Identity Access Management Architect

Hub International Insurance • Chicago, IL

3d • Hybrid

About The Position

HUB International is seeking an experienced IAM Architect to design, build, and evolve its enterprise Identity and Access Management program. The role drives architectural standards for authentication, authorization, provisioning, and privileged access across cloud, SaaS, and on-premises environments. It translates business and security requirements into reference architectures, technical standards, and multi-year roadmaps for workforce and privileged identities.

The architect leads the design, implementation, and integration of IAM/IGA solutions, develops identity governance and lifecycle processes, and works with cybersecurity, infrastructure, cloud, and application teams to align identity strategy with enterprise security goals. The role also supports compliance and audit readiness, technical governance, Agile delivery, and continuous improvement, while mentoring engineers, developers, and analysts. The position reports into Chicago and is hybrid, with travel of up to 10% of working time.

Requirements

• Bachelor's degree in technology or security, or equivalent experience.
• At least 7 years of experience in identity and access management, including at least 3 years in an architecture or technical leadership role.
• Proven experience designing and implementing enterprise IGA/IAM solutions such as SailPoint ISC/IdentityNow, Saviynt, or similar.
• Experience with access certifications, provisioning workflows, lifecycle management, and governance controls.
• Strong understanding of Zero Trust architecture and enterprise security frameworks.
• Expertise with IGA platforms, Active Directory, Entra ID, LDAP, SSO, RBAC, REST APIs, and/or JSON or XML.
• Expertise with SAML, OIDC, OAuth, and SCIM.
• Experience integrating IAM platforms with HR systems, ITSM tools, business applications, and cloud platforms such as AWS, Azure, or GCP.
• Solid understanding of identity-related compliance and audit requirements.
• Excellent communication skills and ability to explain technical concepts to technical and non-technical stakeholders.
• Experience mentoring engineers and leading technical governance discussions.
• Familiarity with Agile delivery methodologies.
• Knowledge of information security standards and regulatory or compliance requirements, such as ISO 27001, NIST 800-53, SOC 2, PCI, and SOX.
• Willingness to travel up to 10% of working time.

Responsibilities

• Develop and maintain the enterprise IAM framework for authentication, authorization, provisioning, and privileged access.
• Rationalize identity platforms and standardize integration patterns to reduce complexity, cost, and operational risk.
• Ensure identity services are highly available, resilient, and audit-ready.
• Improve Joiner-Mover-Leaver processes and reduce identity-related incidents such as credential compromise and orphaned accounts.
• Lead IAM architecture, design, implementation, and integration across enterprise environments.
• Define IAM architecture standards, governance models, and best practices.
• Design scalable identity lifecycle processes and workflows.
• Architect integrations with Active Directory, Azure AD/Entra ID, Workday, ServiceNow, LDAP, SAP, cloud platforms, and REST APIs.
• Maintain IAM architectural diagrams, as-built documentation, and roadmaps.
• Lead application onboarding, provisioning, deprovisioning, and access certification initiatives.
• Provide architecture guidance for compliance, audit readiness, and regulatory requirements.
• Collaborate with cybersecurity, infrastructure, cloud, and application teams to align IAM strategy with enterprise security goals.
• Mentor engineers, developers, and analysts on IAM platform best practices and technical standards.
• Participate in roadmap planning, technical governance, and solution architecture reviews.
• Support Agile delivery, sprint planning, and technical design workshops.
• Contribute to security requirements, standards, procedures, and reference architectures.
• Lead or assist with planning, organizing, and executing responsibilities to achieve project goals and complete operational projects.
• Lead continuous-improvement efforts for HUB's information security identity tooling and systems.
• Engage regularly with peers on security operations, project status, activities, and achievements.

Benefits

• Health, dental, vision, life, and disability insurance.
• Flexible spending account and health savings account options.
• 401(k) accounts and retirement savings matching.
• Company-paid life and disability plans.
• Paid time off, including vacation, sick, personal, floating holidays, and company holidays.
• Paid parental leave.
• Wellbeing program.
• Structured training, licensing support, and ongoing development opportunities.
• Eligible annual bonuses, equity, and commissions may be available for some positions.
• Community impact opportunities through HUB Gives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior